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ROUTING AND RECORD SHEET 


SUBJECT: (Optional) 


Congressional Comment on ISOO Information Security Initiatives 


EXTENSION NO. 


OIS*699*85 


Director of Information Services 
1206 Ames Building 


27 DEC 1985 


TO: (Officer designation, room numbac, and 
building) 


KCEfVEO FORWARDED 


OFFICER'S COMMENTS (Numbor eoch comment to show from whom 
INITIALS to whom. Draw a line ocrost column after eoch comment.) 


EO/DDA 
7D18 Hqs 


Harry: 


ADDA 


Attached are Congressional 
comments on the information 
security initiatives recently 
■ forwarded to the NSC by ISOO 
(see my 3 Dec 85 memorandum) . 
Although no immediate action is 
required, I believe you should 
be aware of the overall favorable 
Congressional reaction, particular- 
ly the SSCI's. SSCI comments go 
far beyond the ISOO initiatives 
themselves and propose the 
development of a comprehensive 
and integrated National Strategic 
Seoirity Program. 


f Information copies have 
been sent to the Chairman, 

DCI Security Committee, Office 
of General Counsel, Office of 
Legislative Liaison, and the 
Office of S ecurity. 
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Office Washington, DC 20405 


December 19, 1985 
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Director of Information Services 
Directorate of Administration 
Central Intelligence Agency 
Washington, DC 20505 

a A 

Dear Mr^. 


For your information, we enclose a copy of the comments of the 
Senate Select Committee on Intelligence, the House Committee on 
Science and Technology, and the Ranking Minority Member of the 
House Permanent Select Committee on Intelligence with respect to 
our initiatives now pending at the White House to improve the 
Government-wide information security program. We also enclose a 
copy of the Information Security Oversight Office's response to 
Congressman Stump. 

We will keep you informed of any other comments that we receive 
and other developments concerning the initiatives. 

Sincerely, 


STEVEN GARFINKEL 
Director 

Enclosures 
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OAVt DURENSERGCR. MINNESOTA, CHAIRMAN 

Patrick leant. Vermont, vice chairman 


WIUIAM V ROTH. JR . DELAWARE 
WILLIAM S. COHEN. MAINE 
ORRtN HATCH. UTAH 
ERANR MORROWS Kt. ALASKA 
ARLEN SPECTER. PENNSYLVANIA 
CHIC HECHT. NEVADA 

mitcn McConnell. Kentucky 


LLOYO SENTSEN. TEXAS 

SAM NUNN. GEOROIA 

THOMAS P. EAGLET ON. MISSOURI 

ERNEST F HOILINGS. SOUTH CAROLINA 

OAVIO L SORCN. OKLAHOMA 

•IU BRADLEY. NEW JERSEY 


United States Senate 


ROBERT OOLE. KANSAS. EX OFFICIO 
ROBERT C. BYRO. WEST VIRGINIA. EX Of PICK) 


BERNARD P. McMAHON. ST ATP 0 IRE C TOR 
ERIC D NEWSOM. MINORITY STAKE DIRECTOR 


SELECT COMMITTEE ON INTELLIGENCE 
WASHINGTON. DC 20SI0 

December 13, 1985 


#85-4252 


The Honorable Robert C. McFarlane 
Assistant to the President for 
National Security Affairs 
The White House 
Washington, D.C. 20500 

Dear Bud: 


..^November 29 1985. Mr. Steven Garflnkel, Director 

Select i0 tk t C t! rity 0vers tgbc Office, advised the 

Select ComraitTtee that he expected action early next year 

on the initiatives he has recommended to improve the 

Government-wide information security system. Mr Garfinkel 

discussed these proposals with the Committee at a hearing 

CmmHf nber 1 5°r!! d indicated that the National Security § 

■f «??? X i - would like to have our input on these or other 
initiatives the Committee might propose. 

■lnfo™5? Ched are . the . Comm it tee's recommendations on 
fnG?^? i0n s . e T curit y xr } response to Mr. Garfinkel's 

We a PP reciate the opportunity to comment on 

conn ' J nd We 8 rateful for the excellent 
cooperation we have received from the Executive branch 

on all aspects of our review of counterintelligence and 

Ecr gram !i We look forwar d to continuing to work 

Ton. “S ™ for Immediate action and 

long-range decisions in this 



Dave Durenberger 
IChairra 


Attachment 



:rickt-fc£ahy 
Mce Chairman 
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SENATE SELECT COMMITTEE ON INTELLIGENCE 
RECOMMENDATIONS ON INFORMATION SECURITY 

The Director of the Information Security Oversight 
Office (ISOO) has recommended a series of initiatives to 
improve the Government-wide information security system. 

They reflect a well-founded concern about five problems: 
overclassification or unnecessary classification; over- 
distribution of classified information; inadequate 
classification management; erosion of the need-to-know 
principle; and unauthorized disclosure. The ISOO 
recommendations were developed in consultation with the 
agencies most involved with national security information, 
and they parallel several points made by the DoD Security 
Review Commission. The Select Committee on Intelligence has 
reviewed the ISOO recommendations and submits the following 
proposals . 

1 . Background 

The Select Committee has a long-standing interest in the 
information security system. The Committee provided input 
to the Administration in 1977 and in 1982 on the succeeding 
Executive Orders on National Security Information. The 
Committee's report on "National Security Secrets and the 
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Administration of Justice" led to enactment of- the 
Classified Information Procedures Act of 1980, which 
set procedures for minimizing unnecessary disclosure of 
national security secrets in criminal prosecutions. 

The Intelligence Identities Protection Act and the CIA 
Information Act were both enacted with Committee support 
so as to improve protection of vital intelligence 
sources and methods. In each instance, the Committee 
sought to strike a balance between legitimate interests 
in secrecy and disclosure. 

The upsurge in espionage cases during 1984-85 has 
focused more attention on weaknesses in information 
security policy. The cases have highlighted the 
security problems that result, in large measure, from 
attempting to protect too much and thereby stretching 
personnel and other security programs too thin. The 
issue is not just inadequate resources, but attitudes 
as well, and the concerns date back many years. No 
one has characterized the situation better than the 
late Justice Potter Stewart, who wrote in the Pentagon 
Papers Case in 1972: 

I should suppose that moral, political, and practical 
considerations would dictate that the very first 
principle ... would be an insistence upon avoiding 
secrecy for its own sake. For when everything 
is classified, then nothing is classified, and the 
system becomes one to be disregarded by the cynical 
or the careless, and to be manipulated by those 


Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 



Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 


-3- 

intent on self-protection or self-promotion. I should 
suppose, in short, that the hallmark of a truly effective 
internal security system would be the maximum possible 
disclosure, recognizing that secrecy can best be 
preserved only when credibility is truly maintained. 

Concern about failure to meet these standards is widespread 
in and out of government. 

During the past year, the Committee has been undertaking 
a comprehensive review of counterintelligence and security 
policies of the United States. This review has included 
not just highly-publicized espionage cases and other specific 
security problems, but the full range of counterintelligence 
efforts and security programs designed to protect sensitive 
information and activities from hostile intelligence operations 
In this context, the Committee has taken a careful look 
at information security policy and its relationship with 
other security disciplines (personnel, physical, communications 
computer, and technical security) as well as with counter- 
intelligence programs. The Committee's recommendations are 
being submitted to the Assistant to the President for 
National Security Affairs as part of continuing consultations 
between the Committee and the NSC, with the aim of reaching 
agreement on an agenda for immediate actions and long-range 
decisions to improve U.S. counterintelligence and security 
programs. 
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2 . Immediate Implementation 

The Committee believes the ISOO recommendations are an 
excellent agenda for short-term actions to improve the 
information security system, although as noted below the 
Committee has several additional proposals for long-range 
decisions. Other recommendations that require prompt action 
at the departmental or national level include many of those 
contained in the Stilwell Commission report, the Inman 
Panel's classified annex on overseas technical security, and 
the latest National Assessment of the Hostile Intelligence 
Services Threat and U.S. Countermeasures. The Committee 
supports the President's recent action to establish a new 
interagency coihmittee, chaired by a member of the NSC staff, 
to ensure effective action on recommendations to control 
the hostile intelligence presence and to improve security 
awareness programs. Strong leadership is essential to 
carry out effectively the recent legislation on controlling 
travel by Soviet bloc nationals at the UN Secretariat 
and on equivalence between U.S. and Soviet official representa- 
tion. The NSC should promptly address other pending counter- 
intelligence and security recommendations, including the 
ISOO recommendations, and assign responsibilities for 
implementation. 

The ISOO recommendations themselves are carefully 
drafted to tighten the administration of the current 


Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 


Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 


-5- 

classif ication system. Even if more fundamental changes 
are needed, as the Committee believes, they should not be 
an excuse for delay. Especially important are the revisions 
proposed in Executive Order 12356 to require the reporting 
of improper classif ication, to require agency heads to 
ensure personal accountability for management of classified 
information, and to require effective internal oversight 
and periodic reconfirmation of special access programs. 

These revisions, along with the other directives and 
policy changes recommended by ISOO, should have the strong, 
publicly-stated endorsement of the President and the 
principal members of the National Security Council. The 
Secretaries of State and Defense, the Attorney General, 
the Director of Central Intelligence, and the Assistant 
to the President for National Security Affairs should 
make clear to their subordinates, publicly where appropriate, 
their commitment to the new information security policies 
for curbing overclassification and overdistribution, 
improving classification management, enforcing the need-to- 
know principle, and improving security awareness and 
investigations of unauthorized disclosures. They should 
hold senior executives and program managers personally 
responsible for effective implementation. 

3 • Nation al Strategic Security Program 

The Committee's review of counterintelligence and 
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security policies in this "year of the spy" has found 
troublesome evidence of a lack of overall national policy 
guidance, especially with regard to the security programs 
and countermeasures that are supposed to protect classified 
information. The Committee believes there is a need for a 
comprehensive and integrated National Strategic Security 
Program to coordinate and foster the protection of information 
and activities having the greatest strategic importance. 

This does not mean establishing a counterintelligence "czar" 
or taking from individual agencies and officials their 
responsibility for implementing national policies as they 
affect their work. Rather, the NSC's statutory mandate to 
advise the President with respect to the integration 
of domestic, foreign, and military policies relating to the 
national security gives it the responsibility to ensure 
coherent national policy direction and implementation 
for : 

o Information security and classification 
o Personnel security 

o Telecommunications and computer security 
o Technical surveillance countermeasures 
o Physical security 
o Industrial security 
o Research and development efforts 
o Security awareness requirements. 

To assist the NSC, a single body should be assigned 

responsibility for policy planning and analysis of all 

aspects of strategic security. In addition, there must 

be more effective coordination among the various 
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overlapping forums that now share responsibility for 
security policy, including the DCI's Security Committee, 
the National Telecommunications and Information Systems 
Security Committee, and the Interagency Group-Counter- 
measures . 

This is not an entirely new concept. The need for 
national policy guidance was identified in 1957 by the 
Commission on Government Security, whose Vice Chairman 
was Senator John Stennis. It proposed an office to ensure 
greater uniformity and higher quality for personnel and 
industrial security throughout the government. Earlier 
this year, the Chairman and Ranking Minority Member of 
the Senate Permanent Subcommittee on Investigations, 
Senators Roth and Nunn (who also serve on the Select 
Committee), recommended establishment of an executive 
body with Government-wide personnel security oversight 
responsibilities similar to those which the ISOO now 
has for information security. 

The DoD Security Review Commission emphasized a 
similar need within the Defense Department. The Stilwell 
Commission stressed "that all security disciplines have 
as their fundamental purpose the protection of classified 
information and must be applied in a fully balanced 
and coordinated way." Thus, the Commission urged the 
Secretary of Defense to consider placing related security 


Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 



Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 


- 8 - 

policy responsibilities in a single OSD staff element, 
with the Defense Security Institute having an expanded 
policy support mission. (The ISOO recommendations call 
for the DSI to have a Government-wide role in basic 
training for all Executive branch security personnel.) 

The Stilwell Commission's idea makes sense at the 
national level as well. The NSC should assign to an 
appropriate body the task of putting together a fully 
balanced and coordinated National Strategic Security 
Program for protecting the most sensitive information 
and activities. A senior official should be designated 
to testify on the National Strategic Security Program 
before the appropriate Committees of the Congress. 

^ • Streaml ining the Classification System 

The information security system requires more extensive 
reform than would result from the ISOO initiatives. While 
they would clearly help, the recommendations are based on 
the premise that, as Mr. Garfinkel stated to the Committee, 
the current structure is "fundamentally sound and, for the 
most part, works quite well." The Committee disagrees. 

The Stilwell Commission reported that "too much 
information appears to be classified and much at higher 
levels than is warranted." It found that little scrutiny 
is given to classification decisions "out of ignorance 
or expedience" and that "few take the time to raise 
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questionable classifications with originators." Like Mr. 
Garfinkel, however, General Stilwell saw the problems as 
"primarily a matter of inadequate implementation of existing 
policy, rather than a matter of deficient policy." 

The Committee shares the view of information security 
experts who see a fundamental, underlying problem in the 
complexity of the system. There are at least four levels 
of classif ication. Overlaying the three levels prescribed 
by Executive Order -- Confidential, Secret, and Top Secret -- 
is a complicated set of special access programs developed 
by various departments and agencies. The proliferation 
of special access programs is testimony to the failure of 
the current class i f ica t ion system. Mr. Garfinkel testified 
that "a number of these programs are probably unnecessary," 
and the Stilwell Commission reported that some special 
access programs actually afford less security protection 
than ordinary classification requirements. 

If the classif ication system is to work in practice, 
it must be streamlined so that officials better understand 
their responsibilities. The Committee supports the ISOO 
and Stilwell Commission recommendations to require, rather 
than simply permit, challenges to classification believed 
to be improper. The impact will be limited, however, 
unless the classification rules are simplified.. 

The Committee recommends consideration of a two-level 
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system, based essentially on the current Secret-level standard 
and the Sensitive Compartmented Information (SCI) model used 
in the Intelligence Community. The Conficential class i f ica tion 
should be dropped* as recommended nearly t'irty years ago by 
the Commission on Government Security. Ir its 1957 report, 
the Commission observed that the danger of access to Confidential- 
level information was "not significant" an: that the minimal 
clearance requirements for such access affcrded "no real 
security check." 

Whatever the legal formula for classification, the 
threshold should reflect a policy that classifies information 
only where truly necessary to maintain national security. 

As stated recently by General Eugene F. Tirne, former Director 
of DIA, "(I]f the U.S. security system for Handling classified 
material is to be useful, only data that are critical to the 
United States status as a political, economic and military 
power should be classified." The initial decision should be 
whether the information requires protection in order to 
prevent substantial harm to identifiable national security 
interests. Rather than assuming that infomation is classified, 
the burden should be to show the need for secrecy. 

The other standard should focus on the much smaller 
universe of data that requires special protective measures 
above and beyond the normal safeguards for classified 
information. As is the case with intelligence data classified 
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SCI, classification at the second level should be based on a 
full analysis of the risks of compromise. Such analysis 
should ensure that special protective measures are imposed 
only where necessary and are not diluted by applying them 
too widely. Careful analysis should also provide the elements 
for more effective security briefings that help senior policy- 
makers as well as lower level employees understand the 
consequences of a security breach. 

In the long run, simplifying the classification system 
will give the ISOO recommendations a much greater chance of 
reversing the natural incentives to overclassification and 
enforcing the need-to-know principle. 

5 . Disclosure Procedures 

Disclosure of classified information to the news media 
raises a different set of issues. The Committee is especially 
concerned about leaks that compromise sensitive intelligence 
sources and methods. Such leaks will continue unless something 
is done about the underlying attitudes that foster disrespect 
for the rules of secrecy. 

The Committee endorses the ISOO recommendation that new 
educational materials, both classified and unclassified, be 
developed to address the damage caused by unauthorized 
disclosures. More effective unclassified materials are 
especially important. The Committee has found the security 
orientation briefings offered routinely by the Executive 


Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 


Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 


branch fall short of minimal requirements, even though some 
security officials can do an excellent job of explaining the 
significance of classification and compartmentation policies. 

Even more important than education, however, are the 
procedures for authorized disclosure of classified information 
to the news media. The ISOO recommendation for reassessment 
of the policies for leak investigations may accomplish little 
without adequate controls over authorized disclosures. 

Currently, the practice of non-a ttr ibu table background 
statements, often drawing on classified information, is 
pervasive. Such statements are virtually indistinguishable 
from leaks. They divert the overworked investigators of 
leaks from the .cases in which administrative discipline, 
dismissal, or legal action is possible; and they reinforce 
the climate of cynicism that leads to leaks and counterleaks. 

Senior officials who authorize disclosures of classified 
information on background, without permitting attribution 
to the source, gain two advantages that undermine an effective 
information security system. First, they often can conceal 
their responsibility for the disclosure, just as the leaker 
does. Second, they can avoid giving the originating agency 
a chance to argue against disclosure and explain the harm 
it would do. If the same information disclosed M on background" 
were contained in a press release, it would have to be formally 
declassified. In practice, however, classified information 
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authorized for disclosure on background technically remains 
classified. There may well be valid reasons for retaining 
a "background" briefing's classified character; but any 
serious effort to address the problem of leaks clearly 
must confront this practice and bring it under control. 

Therefore, one of the most important actions to deter 
leaks and to change the atmosphere that promotes leaks 
would be to require, by Executive order, that agreed procedures 
be followed whenever any official authorizes disclosure of 
classified information to the news media. The procedures 
should apply not only to formal statements for attribution, 
but also to disclosures on background. They should require 
either that the information be declassified or that a record 
be maintained for purposes of accountability when authority 
is exercised or granted to disclose to the news media 
information that remains classified. Such procedures should 
include the requirements to consult the agency that originated 
the information and to designate the officials permitted to 
exercise or grant this authority. 

Strong leadership is needed to break through the cycle 
of leak and counter-leak that pervades the policy community 
and jeopardizes highly sensitive intelligence sources and 
methods. The time is ripe to face the realities of press- 
government relations and adopt sensible rules that bring 
some order to the chaos that has fostered disrespect for 
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secur i ty . 

6 . Conclusion 

The IS00 recommendations can make an important contribu- 
tion to national security if they are implemented vigorously 
with high-level support. The Committee believes they should 
become part of a National Strategic Security Program that 
is monitored by the NSC and the Congress. They should also 
lead to more fundamental reforms to simplify the classification 
system and to establish procedures with consultation and 
accountability for authorized disclosures. These initiatives, 
together with actions in other areas of counterintelligence 
and security that the Committee is considering, can ensure a 
level of protection for sensitive information and activities 
commensurate with the threats and vulnerabilities the United 
States will face in the years ahead. 
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HAROLD P HANSON 

December 16, 1985 o...co. 

ROBERT C KETCHAM 
Gsnarsl Counsel 
JOYCE GROSS FREIWALO 
Republican Staff Director 


Steven Garfinkel, Director 
General Services Administration 
Information Security 
Oversight Office 
Washington, DC 20405 

Dear Mr. Garf i nkel : 

Thank you for sharing with the Committee on Science and Tech-:iogy the 
Information Security Oversight Office's (IS00) recommended i- tiatives 
to improve the government-wide information security system. e 
believe these i ni ti ati ves woul d make an important contribute* to a 
more systematic implementation of E.0. 12556. In addition, **e 
initiatives have the potential to encourage uniform procedure 
throughout the Federal Government. 

As you know, the Committee has been concerned about the impair of na- 
tional security considerations on science and technology. 0* particu- 
lar concern are barriers to scientific communication such as jnneces- 
sary and overly restrictive classification of scientific anc technical 
information. In that regard, we appreciate the issuance of.^ational 
Security Decision Directive 189, National Policy of the Transfer of 
Scientific, Technical and Engineering Information. We trust this di- 
rective will be used as a basis for the security education e~t train- 
ing proposed in the ISOO's recommended initiatives. 

We also hope that the ISOO's recommended initiatives and Directive 189 
will help to facilitate balanced decisions on issues such as *he pro- 
posed limitations on access to National Science Foundation s.oercom- 
puter centers by certain foreign nationals. As you develop -*ie IS00 
initiatives, we trust emphasis will be given to the need tonaintain 
openness and free inquiry on our nation's campuses. 

We appreciate the opportunity to comment on ISOO's recommenced initia- 
ti ves. 


DF/Odh 
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Services Oversight , 

Administration Office Washington, DC 20405 



December 18, 1985 


Honorable Bob Stump 
Ranking Minority Member 

Permanent Select Committee on Intelligence 
House of Representatives 
Room H-405 , The Capitol 
Washington, DC 20515 

Dear Mr. Stump: 

Thank you very much for your lpttpr of , 

We°believe h that e someone°with Sf ° £ the 

conduct a thorough survey seluritv ? pertise should 

and recommend procedures for continual tees on Capitol Hill 

are reluctant to Include o« supoor? of • H °!' ever ' we 

of initiatives that we havp rooo™ a°j the in the package 

President for National Security Affairs °Fi Assi ® tant to the 
legislation by any agency requires it tf *. endorsemen t of 

procedures which are defined ^ Exeiut^/ 11 ^ 6 t0 particular 
ment of H.R. 3387 in this situat fon^o. 1 ^ ° rder * .ISOO's endorse- 
process. Second, the proposal inma^f ° Uld be outside the mandated 
branch. ISOO's support for it at P th^ f? lely on the legislative 

£r 0 s?y“i^ ^t? b F- 

ini tiativjsf 91 ^ 126 *>“ USl^ioTS' 

piinciplls^ontained^n^ 0 ^ ^ end ° rse strongly the 

through the regular p^ce^s* III 1 ^ J s asked to do so* 
to express my appreciation for the work ta £ e th u S °PP° rt unity 
seek improvement of the informs*-,- 0rk y ? u ^ ave been doing to 
legislative and executive branches" S w?fh lty pr ° grams in b °th the 
you and others who hold critical Ln! h ' S T rt like this from 
hope to be able to make }»Jr con 9 ress |onal assignments, we 

enhance our national security. provements in the system that will 
Sincerely, 

Tsl'Rned) Steven Gnrf Intel 


STEVEN GARFINKEL 
Director 


Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 



Sanitized Copy Approved for Release 2009/12/30 : CIA-RDP87M01 152R0002001 40002-8 


IF t M HAMILTON. INDIANA. CHAIRMAN 

LOUIS STOKES. OHIO 
DAVE McCURDX OKLAHOMA 
ANTHONY C. BEILENSON. CALIFORNIA 
ROBERT W. KASTENMEIER, WISCONSIN 
DAN DANIEL VIRGINIA 
ROBERT A. ROE. NEW JERSEY 
GEORGE E. BROWN. JR.. CALIFORNIA 
MATTHEW F. MCHUGH. NEW YORK 
BERNARO J. DWYER. NEW JERSEY 

BOB STUMP. ARIZONA 
ANDY IRELAND, FLORIDA 
HENRY J. HYDE. ILLINOIS 
DICK CHENEY, WYOMING ' 

BOB LIVINGSTON. LOUISIANA 
BOB McEWEN. OHIO 


\ 


U.S. HOUSE OF REPRESENTATIVES 

PERMANENT SELECT COMMITTEE 
ON INTELLIGENCE 

WASHINGTON, DC 20515 


Room H-' 
|2 r 


THOMAS K. LATIMER. STAFF DIRECTOR 
MICHAEL J. O'NEIL CHIEF COUNSEL 
STEVEN K. BERRY. ASSOCIATE COUNSEL 


December 4, 1985 


Mr. Steven Garfirikel 

Director, Information Security Oversight Office 
General Services Administration 
Washington, D.C. 20405 

Dear Mr. Garfinkel: 

This is in response to your letter of November 29, 1985 soliciting the 
views of Members of the House Permanent Select Committee on Intelligence on 
your proposed thirteen initiatives to inprove the Government-wide information 
security system. Your initiatives, if carried out faithfully by the various 
departments and agencies, should contribute to improved information security 
in the executive branch. I am concerned, however, that equivalent efforts are 
not under way in the legislative branch, and I believe that the support of the 
executive branch for such efforts would be valuable. 

Although your Office's authority may extend only to the Executive Branch, 
your Office's concern for Government-wide information security undoubtedly 
extends also to the legislative branch, which maintains substantial holdings 
of classified documents. 

On September 19, 1985, the entire Minority Membership of the House 
Permanent Select Committee on Intelligence cosponsored H.R. 3387, the 
Congressional Security Survey Act. Expression of Administration support, 
through the National Security Council and your Office, for H.R. 3387 would 
greatly increase the possibility that security practices in both Houses of 
Cbngress will improve. 

I would urge you to recommend to the National Security Council as a 
fourteenth ISOO-recommended initiative that the Administration express its 
support for H.R. 3387. 


\ 

< 5 ^ 

CM? 


Sincerely, 
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